Defect Month Project Launched to Disclose PHP Scripting Language Vulnerabilities_PHP Tutorial

A security researcher has launched a new project to disclose vulnerabilities in the PHP scripting language.

The project called Month of PHP Bugs was launched last Thursday. According to the project's website, five flaws have been disclosed so far, some of which may compromise the security of systems running PHP.

Well-known PHP security expert Ethiopia stated on the project’s website that this project aims to improve the security of PHP. He wrote that the disclosed flaws would primarily be flaws in the PHP core rather than the PHP language.

PHP is a scripting language widely used to create dynamic web pages. According to statistics provided by the security news website Security Focus, application software written in PHP accounted for 43% of the total defects reported in 2006.

Unlike other "Bug Month" activities launched in the past few months, Month of PHP Bugs does not only contain newly discovered defects. Some of the defects it discloses may have been fixed, and many defects may have been fixed. This has been reported to the PHP security team.

Month of PHP Bugs is similar to other projects aimed at disclosing flaws in software. Researchers behind these projects say they hope to make systems more secure so that publicly disclosed flaws will be fixed more quickly.